Serveur de bases de données MySQL/MariaDB sous CentOS 7

[Coddy]

Installation et configuration Installer MySQL/MariaDB.

Code : Tout sélectionner

$ sudo yum install mariadb-server mariadb

Le client mariadb est automatiquement installé par le paquet mariadb-server.

Activer et démarrer le service.

Code : Tout sélectionner

$ sudo systemctl enable mariadb --now

Sécuriser le serveur MySQL/MariaDB

MySQL/MariaDB dispose de l’utilitaire mysql_secure_installation pour assurer la sécurité d’une installation fraîche sur une machine de production. Ce programme permet d’effectuer quelques démarches de sécurisation essentielles.

1. Définir un mot de passe root MySQL (ne pas confondre avec le compte root Linux).
2. Supprimer les comptes root MySQL accessibles de l’extérieur.
3. Supprimer les connexions anonymes.
4. Supprimer la base de données de test.

Lancer la sécurisation.

Code : Tout sélectionner

$ sudo mysql_secure_installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL 
      MariaDB SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP 
      CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current
password for the root user.  If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.

Enter current password for root (enter for none): [Entrée]
OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the 
MariaDB root user without the proper authorisation.

Set root password? [Y/n] y
New password: **********
Re-enter new password: **********
Password updated successfully!
Reloading privilege tables..
 ... Success!

By default, a MariaDB installation has an anonymous user, allowing 
anyone to log into MariaDB without having to have a user account 
created for them.  This is intended only for testing, and to make 
the installation go a bit smoother.  You should remove them before 
moving into a production environment.

Remove anonymous users? [Y/n] y
 ... Success!

Normally, root should only be allowed to connect from 'localhost'. 
This ensures that someone cannot guess at the root password from 
the network.

Disallow root login remotely? [Y/n] y
 ... Success!

By default, MariaDB comes with a database named 'test' that anyone 
can access.  This is also intended only for testing, and should be 
removed before moving into a production environment.

Remove test database and access to it? [Y/n] y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so 
far will take effect immediately.

Reload privilege tables now? [Y/n] y
 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MariaDB
installation should now be secure.

Thanks for using MariaDB!

Dorénavant, il faut se connecter au moniteur MySQL/MariaDB avec le mot de passe que l’on vient de définir un peu plus haut.

Code : Tout sélectionner

$ mysql -u root -p
Enter password:
Welcome to the MariaDB monitor.
...
MariaDB [(none)]>

Afficher les bases de données.

Code : Tout sélectionner

MariaDB [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
+--------------------+
3 rows in set (0.00 sec)

Utiliser la base de données mysql.

Code : Tout sélectionner

MariaDB [(none)]> use mysql;
Database changed

Afficher les utilisateurs.

Code : Tout sélectionner

MariaDB [mysql]> select user, host, password from user;
+------+-----------+-------------------------------------------+
| user | host      | password                                  |
+------+-----------+-------------------------------------------+
| root | localhost | *6883419C147A759B04D78A2D1E4E0C5BB0CDD1B4 |
| root | 127.0.0.1 | *6883419C147A759B04D78A2D1E4E0C5BB0CDD1B4 |
| root | ::1       | *6883419C147A759B04D78A2D1E4E0C5BB0CDD1B4 |
+------+-----------+-------------------------------------------+
3 rows in set (0.00 sec)

On va garder la seule entrée pour root@localhost et supprimer les deux autres.

MariaDB [mysql]> delete from user where host!='localhost';
Query OK, 2 rows affected (0.00 sec)

Vérifier le résultat de l’opération.

Code : Tout sélectionner

MariaDB [mysql]> select user, host, password from user;
+------+-----------+-------------------------------------------+
| user | host      | password                                  |
+------+-----------+-------------------------------------------+
| root | localhost | *6883419C147A759B04D78A2D1E4E0C5BB0CDD1B4 |
+------+-----------+-------------------------------------------+
1 row in set (0.00 sec)

Quitter la console.

Code : Tout sélectionner

MariaDB [mysql]> quit;
Bye